CompTIA SecurityX Practice Test

In risk management, identifying what needs protection starts with the idea of an asset. An asset is anything of value to the organization—people, facilities, equipment, data, software, or even intangible items like brand reputation. Recognizing assets lets you assess what threats could impact those valuable items and determine appropriate protections, controls, and response plans. The term asset is the best fit because it directly names the object itself that has value. Availability describes the extent to which something is accessible and usable, which is a property you want to protect for an asset, not the item itself. Asset value is the value assigned to an asset, which is important for prioritization and cost–benefit analysis but isn’t the object in question. BCP, or business continuity planning, is the plan for continuing operations during a disruption, not the object of value. For example, a company’s server is an asset, and its value contributes to how critical it is to protect and how much recovery effort is justified. The goal is to safeguard the asset, not the state of being available or the plan for disruption.